There was quite a bit of discussion about this on the linux-IPSEC ml. Ican forward the thread to you, if you are not subscribed and nobodyscreams "archive at ..." now.Also alt.security.pgp, atl.privacy.* ng's likely have lagre threadsabout that.